$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa File: D91746DE044F11EA8C37D012C4F9AE02.roa (raw, json) Hash identifier: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk= Subject key identifier: 7B:DF:F7:7E:9F:9E:06:76:A4:CE:D0:06:91:2D:3D:30:25:DD:07:F2 Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CE1 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:52:44 +0000 ROA not before: Tue 04 Nov 2025 18:37:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139722 IP address blocks: 103.144.42.0/23 maxlen: 23 103.144.42.0/24 maxlen: 24 103.144.43.0/24 maxlen: 24 2405:6540::/48 maxlen: 48 2405:6540:1::/48 maxlen: 48 2405:6540:2::/48 maxlen: 48 2405:6540:3::/48 maxlen: 48 2405:6540:4::/48 maxlen: 48 2405:6540:5::/48 maxlen: 48 2405:6540:6::/48 maxlen: 48 2405:6540:7::/48 maxlen: 48 2405:6540:8::/48 maxlen: 48 2405:6540:9::/48 maxlen: 48 2405:6540:a::/48 maxlen: 48 2405:6540:b::/48 maxlen: 48 2405:6540:c::/48 maxlen: 48 2405:6540:d::/48 maxlen: 48 2405:6540:e::/48 maxlen: 48 2405:6540:f::/48 maxlen: 48 2405:6540:10::/48 maxlen: 48 2405:6540:11::/48 maxlen: 48 2405:6540:12::/48 maxlen: 48 2405:6540:13::/48 maxlen: 48 2405:6540:14::/48 maxlen: 48 2405:6540:15::/48 maxlen: 48 2405:6540:16::/48 maxlen: 48 2405:6540:17::/48 maxlen: 48 2405:6540:18::/48 maxlen: 48 2405:6540:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Nov 4 18:37:23 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a444ac-fe77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:ee:dc:17:cf:e9:4e:e5:43:5e:b7:7f:70: 54:d3:aa:b4:d5:1a:ff:81:c7:c8:21:e7:69:19:6d: 54:46:e6:ec:9f:27:72:1f:ee:e1:bf:f4:b5:39:df: cf:fc:67:2c:25:64:83:d5:81:6b:8f:3f:94:1a:45: 01:c0:a5:ad:fd:d4:8a:68:10:e6:67:a8:5b:b0:a0: 8e:2b:a9:ca:d2:f7:4f:53:d8:35:cd:71:89:ab:ea: 13:41:0d:51:62:bb:cf:26:37:e1:52:0d:29:c6:3e: cd:4b:1a:09:0f:24:2c:51:6b:e6:e1:49:b3:3d:42: 13:a6:88:a6:89:68:32:8a:e4:c6:a7:83:22:2d:46: 72:6f:81:10:69:19:3f:f0:d0:d4:f6:25:8d:56:32: bb:fa:7c:0b:93:a5:eb:4e:6c:de:dd:1f:47:72:0b: 55:dc:0f:f6:54:ef:f6:3a:97:e1:94:fe:a9:6f:55: 6b:4d:36:98:8c:80:32:4b:54:1f:5e:0e:5a:17:9d: 87:0a:49:63:18:c9:4f:98:34:47:86:4d:51:b1:28: f4:f1:82:33:d5:65:a4:27:05:79:6e:ad:7e:5c:c3: 26:5c:e7:a9:9a:31:f3:17:2e:df:27:3a:7b:af:01: 18:8e:54:25:ea:19:5c:94:ed:66:42:88:33:f9:16: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:F7:7E:9F:9E:06:76:A4:CE:D0:06:91:2D:3D:30:25:DD:07:F2 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/D91746DE044F11EA8C37D012C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.144.42.0/23 IPv6: 2405:6540::-2405:6540:19:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 39:78:d5:92:51:d6:34:a3:4c:9d:67:58:2a:a9:48:a5:1f:93: 92:87:96:50:01:de:15:66:2e:2e:6c:6f:ce:74:3a:ab:ed:de: d8:01:81:a7:f7:0b:e0:6d:a8:c2:12:88:ee:60:3d:5b:53:b6: de:bc:11:8e:99:8c:ba:8c:c7:c4:94:66:0a:45:ec:be:7f:56: c1:06:30:70:8f:88:62:91:a0:20:c0:19:f4:e4:a1:ab:63:f8: a0:5c:23:29:63:7e:3a:b9:ab:5d:41:e5:51:f6:fa:e6:56:14: a1:b6:93:69:f0:70:a9:7c:1f:2d:0d:40:50:78:74:2d:c5:cd: e5:55:54:75:dc:49:88:14:b1:3b:a5:ed:ac:ab:25:22:83:b4: 35:ed:ed:e8:00:38:2c:e6:b2:db:83:3a:23:f7:22:05:14:09: 8f:ae:d3:64:87:71:64:83:c1:66:b1:82:f0:a5:f9:d0:bd:bc: 50:15:e0:c0:ec:f2:22:3b:48:75:4c:ce:a9:29:e3:41:5d:9c: 32:33:a9:a5:a1:f3:64:49:db:4a:db:f6:24:07:24:3e:5c:84: 37:19:b7:25:ef:9f:6e:82:62:5a:94:8a:a5:88:28:a6:89:06: c6:73:68:0b:3d:56:c1:50:94:c4:1b:bc:6c:48:dc:29:8e:92: 2e:84:9f:08 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMTA0MTgzNzIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDRhYy1mZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbDu3BfP6U7lQ163f3BU06q01Rr/gcfIIedpGW1URubsnydyH+7hv/S1Od/P /GcsJWSD1YFrjz+UGkUBwKWt/dSKaBDmZ6hbsKCOK6nK0vdPU9g1zXGJq+oTQQ1R YrvPJjfhUg0pxj7NSxoJDyQsUWvm4UmzPUITpoimiWgyiuTGp4MiLUZyb4EQaRk/ 8NDU9iWNVjK7+nwLk6XrTmze3R9HcgtV3A/2VO/2OpfhlP6pb1VrTTaYjIAyS1Qf Xg5aF52HCkljGMlPmDRHhk1RsSj08YIz1WWkJwV5bq1+XMMmXOepmjHzFy7fJzp7 rwEYjlQl6hlclO1mQogz+RYyjwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFHvf936f ngZ2pM7QBpEtPTAl3QfyMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU2QjkvNTI2RTE2QTQwNDRFMTFFQTg0NDJENDBGQzRGOUFFMDIvRDkxNzQ2REUw NDRGMTFFQThDMzdEMDEyQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQBZ5AqMBgEAgACMBIwEAMFBiQFZUADBwEkBWVAABgwDQYJKoZIhvcN AQELBQADggEBADl41ZJR1jSjTJ1nWCqpSKUfk5KHllAB3hVmLi5sb850Oqvt3tgB gaf3C+BtqMISiO5gPVtTtt68EY6ZjLqMx8SUZgpF7L5/VsEGMHCPiGKRoCDAGfTk oatj+KBcIyljfjq5q11B5VH2+uZWFKG2k2nwcKl8Hy0NQFB4dC3FzeVVVHXcSYgU sTul7ayrJSKDtDXt7egAOCzmstuDOiP3IgUUCY+u02SHcWSDwWaxgvCl+dC9vFAV 4MDs8iI7SHVMzqkp40FdnDIzqaWh82RJ20rb9iQHJD5chDcZtyXvn26CYlqUiqWI KKaJBsZzaAs9VsFQlMQbvGxI3CmOki6Enwg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:23 2026 by rpki-client